Overview

overview

10

Static

static

10

BonDay(VovaKuz).exe

windows7-x64

10

BonDay(VovaKuz).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    BonDay(VovaKuz).exe

  • Size

    23KB

  • MD5

    5688deb8fa7847d35edc9c483c0b2429

  • SHA1

    867761d2582da4a064868f95abbcb38c82e0bec7

  • SHA256

    2bc8b2b68450f868d29a5c3be8ed9d0674e99c3eec32f764bf786e90cec28ac9

  • SHA512

    cdfd7d88c11b083f809651c5dd41d67d5d6b0e4d6c5e82eef6bdcfb827168cf1e237f536147b7fd7f360a3141906e3834cba28bd57271ca8927dba42797fae72

  • SSDEEP

    384:rTq4aKll4h7o93VyDGvEWJh46sgKkbmyk38mRvR6JZlbw8hqIusZzZGD:cO00y6vE/RpcnuH

Score
10/10
bondaynjrat

Malware Config

Extracted

Family

njrat

Version

Madest 0.7d

Botnet

BonDay

Mutex

613b5255dc93559ec83b6120ba141c83

Attributes
  • reg_key

    613b5255dc93559ec83b6120ba141c83

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BonDay(VovaKuz).exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections